Cookie policy
Three necessary cookies, three optional ones, and what stops working without each of them.
What this website stores on your device
The six there are are explained below by what would happen if they were missing, which is more useful than a category label. Three are essential and are always set; the other three stay switched off until you accept. There are no embedded players, social media buttons or tracking pixels quietly adding to this list.
Necessary
None of the three carries an advertising identifier or is used to profile anyone: they handle security, the initial check and the memory of your own answer.
| Cookie | What it is there for | How long it lasts |
|---|---|---|
cf_clearance, __cf_bm | These are Cloudflare's. Without them there is no way to tell a human visit from an automated crawler, and the website stops serving pages as soon as someone crawls it in bulk. | Up to 1 year / 30 minutes |
wordpress_test_cookie | A one-off test: if it cannot be written, the site assumes your browser rejects cookies and stops trying. | Deleted when you close the browser |
cmplz_* | Written by the banner itself (Complianz), they hold the answer you gave, purpose by purpose. If you delete them, the banner appears again as if it were your first visit. | 12 months at most |
Optional
All three wait for your consent and none is written before it. Rejecting advertising does not empty the ad blocks: they stay filled, with ads chosen by the content of the page rather than by you. The obligation to ask first comes from article 22.2 of Spanish Law 34/2002 (LSSI), as interpreted by the cookie guide of the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
| Cookie | What it is there for | How long it lasts |
|---|---|---|
_ga, _ga_* | They tag your visit with an anonymous identifier so that two pages in a row are not counted as two different visitors. The IP address arrives truncated. | Two years at most |
__gads, __gpi, __eoi | They serve the ads in the ad block: they stop the same one appearing again and again, filter out fraudulent clicks and, with your consent, refine the selection. | 13 months at most |
IDE, DSID | They belong to Google's advertising domain and follow a click on an ad through to its destination. | 13 months at most |
Changing your mind
The footer of every page has a “Privacy and cookie settings” link that reopens the banner. Whatever you decide there applies immediately (if you withdraw consent, any _ga cookies already stored are deleted) and does not lock you out of any content on the website.
Doing it from your browser
Your browser can delete or block cookies from a specific domain, and that instruction overrides any option on this page. One side effect worth anticipating: if you remove the Cloudflare ones, sending the contact form may end up classed as suspicious traffic. Timetables, fares and station pages work just the same.
Last updated: October 2026.